Access Templates granted to Well Known SIDs resolve under the first Domain listed in the Active Roles Console (4339123)

When reviewing linked Access Templates on the Active Roles Security tab of the Advanced Details pane within the Active Roles Console, Access Templates assigned to Well-Known SIDs (such as Account Operators) will display as being resolved under the first Domain listed within the Active Roles Console.

This is a display issue only: only the SID from the targeted Domain can access the delegated resource, and the Native Security tab within the Active Roles Console will display the desired delegated access.

For a full list of Well-Known SIDs please see this resource.

This has been identified as a product defect and is being tracked under Defect ID TF00691302.

WORKAROUND

None

STATUS

Waiting for fix in a future release of Active Roles.